Srbtranslatin Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Srbtranslatin Project records in CISA KEV

No Srbtranslatin Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Srbtranslatin 3 records MEDIUM

Records

3 records

TI-2023-01059 CVE-2023-1119 · GHSA-2fmj-pq77-gvj7

Multiple Plugins - Cross-Site Scripting From Third-party Library

MEDIUM 60

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01244 Published 2023-07-10 Fixed in 3.2.13, 2.4.1

TI-2018-03901 CVE-2018-5368 · GHSA-x6cf-x436-chgh

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.

LOW 39

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00642 Published 2018-01-12 No fix listed CWE-352

TI-2018-03902 CVE-2018-5369 · GHSA-9jmx-xc85-gw2x

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to…

LOW 23

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a lang_identificator parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00623 Published 2018-01-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0